diff --git a/.github/workflows/updatecli.yaml b/.github/workflows/updatecli.yaml
index ff0ae11..2be5fb7 100644
--- a/.github/workflows/updatecli.yaml
+++ b/.github/workflows/updatecli.yaml
@@ -13,7 +13,7 @@ jobs:
       - name: "Checkout"
         uses: "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1" # v7.0.1
       - name: "Setup updatecli"
-        uses: "updatecli/updatecli-action@5d180ff09f5204e599bbd6030cd1736009ed5ff2" # v3.9.0
+        uses: "updatecli/updatecli-action@93ae2608256484ef8598e902aa675bbc9e278e4e" # v3.10.0
         with:
           version: "v0.122.1"
       - name: "Run updatecli"
diff --git a/.github/workflows/updatecli_test.yaml b/.github/workflows/updatecli_test.yaml
index e63af5c..32d21d9 100644
--- a/.github/workflows/updatecli_test.yaml
+++ b/.github/workflows/updatecli_test.yaml
@@ -11,7 +11,7 @@ jobs:
       - name: "Checkout"
         uses: "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1" # v7.0.1
       - name: "Setup updatecli"
-        uses: "updatecli/updatecli-action@5d180ff09f5204e599bbd6030cd1736009ed5ff2" # v3.9.0
+        uses: "updatecli/updatecli-action@93ae2608256484ef8598e902aa675bbc9e278e4e" # v3.10.0
         with:
           version: "v0.122.1"
       - name: "Test updatecli in dry-run mode"
diff --git a/.github/workflows/updatecli_update.yaml b/.github/workflows/updatecli_update.yaml
index 0225c62..5f2770a 100644
--- a/.github/workflows/updatecli_update.yaml
+++ b/.github/workflows/updatecli_update.yaml
@@ -12,7 +12,7 @@ jobs:
       - name: "Checkout"
         uses: "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1" # v7.0.1
       - name: "Setup updatecli"
-        uses: "updatecli/updatecli-action@5d180ff09f5204e599bbd6030cd1736009ed5ff2" # v3.9.0
+        uses: "updatecli/updatecli-action@93ae2608256484ef8598e902aa675bbc9e278e4e" # v3.10.0
         with:
           version: "v0.122.1"
       - name: "Run updatecli only on existing pipelines"
diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml
index a35b633..87fa32a 100644
--- a/.github/workflows/zizmor.yaml
+++ b/.github/workflows/zizmor.yaml
@@ -16,7 +16,7 @@ jobs:
         with:
           persist-credentials: false
       - name: "Run zizmor \U0001F308"
-        uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4
+        uses: zizmorcore/zizmor-action@53290badfa369cb0bf7ad16342cb62c2fa47ac7b # v0.8.0
         with:
           # intentionally not scanning the entire repository,
           inputs: ./.github/